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Dial-up client sends version 
information and DN to PKI-Bridge 
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PKI-Bridge checks 
version information and 
forwards DN to Server- 
side cryptographic 
function 
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Server-side cryptographic 
function generates and forwards 
challenge string to PKI-Bridge 
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PKI-Bridge forwards challenge 
string to Dial-up Client 


Dial-up Client forwards challenge 


string to Custom Script DLL 
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Custom Script DLL forwards 
challenge string to Client-side 
cryptographic function 
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Client-side cryptographic function 
8 j»f j »n » j )rivate key from security 
device, and generates signed 
response string 
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Server-side cryptographic 
function verifies signed response 
string 
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Server-side cryptographic 
function obtains user's public key 
from directory service 
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PKI-Bridge forwards signed 
response string to Server-side 
cryptographic function 
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PKI-Bridge receives packets and 
reconstructs signed response 
string (including decoding) 
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Custom Script DLL forwards 
encoded packets to PKI-Bridge 
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Custom Script DLL encodes and 
divides signed response string 
into packets 
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Client-side cryptographic function 
forwards signed response string 
to Custom Script DLL 
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